CVE-2006-5546: Otscms

Medium severity, CVSS 5.1. EPSS: 3.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][classes] parameter.

Affected products

• Otscms Otscms: version 1.3.0 only; version 1.3.3 only; version 1.3.4 only; version 1.4.1 only

Published 2006-10-26. Last modified 2026-06-16.